Privacy Policy

Eloa is operated by Eloa. For any privacy question you can reach us at privacy@eloa.health. Eloa is a general-wellness product and is not an official Google or Fitbit product.

We keep collection to what the product genuinely needs:

• Account data — your email address, used to sign you in and contact you about your account.
• Health & wellness data — metrics from your Fitbit Air, such as heart rate, sleep, and activity, retrieved from Google Health only after you connect your account and grant consent.
• Journal entries — notes and check-ins you choose to record.
• Technical data — limited, security-related logs needed to operate the service reliably.

We use your data to compute your wellness scores (recovery, sleep, load), show trends, power features you enable, secure your account, and provide support. We do not sell your data or use it for advertising.

Your account and health records are hosted in the European Union (EU West). Access tokens for connected services are encrypted. Eloa's private AI coach runs on your device, and those conversations are not uploaded to our servers.

We rely on a small number of processors to run Eloa:

• Convex — Backend, database, and secure sync (hosted in the EU).
• Google Health — Source of your Fitbit Air metrics, connected with your consent.
• Resend — Transactional email (sign-in codes, replies).

When you connect Google Health, Eloa requests only the scopes needed for the features you use, and you can disconnect at any time. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer this data to others except as necessary to provide or improve the features you use, for security, or to comply with the law.

Workout sharing is off by default. If you enable it and grant device permissions, Eloa saves new runs and walks you record to Apple Health on iPhone or Health Connect on Android. You can allow distance, measured heart rate and, on Android, cadence. GPS routes require a separate choice and permission. Imported workouts and demos are never exported. Eloa does not request access to other apps' health records for this feature.

Sharing preferences and pending exports are encrypted on your phone. Turning sharing off cancels pending exports and stops future sharing; an export already in progress may finish. Previously shared records remain in your health app when you delete a recording or your Eloa account. Manage permissions and remove those records in Apple Health or Health Connect. Other apps, including Google Health, can use the shared records only according to the permissions you grant them.

External assistant access is optional and separate from Eloa's on-device coach. When you connect through sign-in, you choose whether a connected assistant such as Claude (Anthropic) or Codex (OpenAI) can read your health summaries, workouts, meals or journal notes. The assistant provider receives records when requested and may process or retain them under its own policies, including outside the EU. Eloa does not include GPS routes, raw health streams or Google credentials. Access credentials are stored as one-way hashes and expire. Disconnect an assistant in You to stop future access. Account deletion removes all assistant access immediately. These actions do not erase data already received by an assistant; manage that data with its provider.

Under the GDPR you can access, correct, export, or delete your data, and object to or restrict certain processing. You can delete your account and its data from within the app; see the account deletion page. To exercise any right, contact privacy@eloa.health.

We keep your data while your account is active. When you delete your account, we remove your account, health records, tokens, and exports in bounded deletion batches, retaining only what the law requires.

We may update this policy as Eloaevolves. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated to you directly.